Office of the Data Protection Commissioner

Register with the Office of the Data Protection Commissioner (ODPC) and be compliant with Kenya’s data protection requirements.

Registration is a key step toward responsible data governance, transparency, accountability, and building trust in the digital ecosystem.

Your data, your responsibility.

Whether you’re a Data Controller or Data Processor, compliance starts with registration. Register with the ODPC today and stay on the right side of data protection laws.

Handling personal data? Stay compliant with Kenya’s Data Protection Act by registering with the ODPC as a Data Handler or Data Processor.

Visit www.odpc.go.ke and complete your registration today. ✅

Wishing you a peaceful celebration and a good rest. See you on the other side of Eid!

Eid al-Adha...Mubarak

It was a privilege to engage students at the Student Journalism Clubs Expo hosted at Homa Bay High School on the importance of data protection, privacy, and responsible digital engagement.

The Expo, organized by the Media Council of Kenya in partnership with ODPC and the Kenya News Agency, brought together students from 41 schools across the Nyanza Region, creating a valuable platform for discussions on safeguarding personal information, ethical communication, and responsible participation in today’s digital space.

It was inspiring to see young journalists and media enthusiasts actively engage on issues surrounding digital safety, privacy rights, and media ethics. Empowering students with knowledge on responsible online behavior is key to shaping a more informed, secure, and digitally responsible generation.

ODPC led by Data Commissioner Immaculate Kassait, SC, MBS this week participated a the Network of African Data Protection Authorities (NADPA) Annual General Meeting and Conference in Abidjan, Côte d’Ivoire.

The meeting brought together African data protection authorities and other stakeholders to discuss emerging issues in the data protection landscape. Key topics included data governance, AI and other emerging technologies, cross-border data flows, and regional harmonization. The conversations underscored the importance of collaboration and knowledge exchange in building sustainable and resilient data protection ecosystems across the region.

In her final remarks as outgoing Vice Chair of NADPA, the Data Commissioner called upon African Data Protection Authorities to greatly participate in the Convention 108 and to strongly engage with regional blocs.

She further called upon more capacity-building initiatives on data protection, convergence on cross-cutting issues on data protection, consumer protection, competition law and enhanced cybersecurity.

"We need to have stronger collaboration on enforcement and continually support the NADPA Secretariat.It is important that we identify areas of convergence and work together to strengthen enforcement and regional cooperation, " she remarked.

During the AGM, a new board was also elected to steer the network for the next three years.

Congratulations to Cape Verde on being elected Chair, to Côte d’Ivoire as First Vice Chair, and to Zimbabwe as Second Vice Chair.

Kenya is honored to have served as First Vice Chair for the past three years, a period that saw the development of the network’s strategic plan.

"We congratulate the new board members and wish them every success in their term," the Data Commissioner said.

The meeting also admitted Malawi, Guinea, Togo, and Madagascar as new members, and unanimously voted for Zimbabwe to host the next Annual General Meeting.

At the Law Society of Kenya (LSK) in-house lawyers caucus, Data Commissioner Immaculate Kassait, SC, MBS urged legal practitioners to thoroughly understand data protection and privacy concepts. She emphasized the importance of monitoring changes in privacy, data protection, and ICT legislation while keeping pace with emerging technologies.

“A deep understanding of data protection principles is essential for legal practitioners to effectively navigate the evolving landscape of personal data processing.”

This knowledge, she said, will enrich the data protection landscape and ensure the incorporation of data protection principles in legal practices. She also encouraged collaboration with the ODPC when necessary.

However, she acknowledged challenges such as policy lag—where technology evolves faster than regulations—and divergent data protection standards, which complicate harmonization due to varying definitions of personal data and consent.

"The ODPC is committed to enhancing knowledge and understanding of data protection among stakeholders across various sectors to build trust and transparency in Kenya," she remarked.

It was a great opportunity to engage students at the Student Journalism Clubs Expo held at Mukumu Girls High School on the importance of data protection, privacy, and responsible digital engagement.

The expo which was organised in partnership with Media Council of Kenya and the Ministry of Education brought together students from 23 schools across the Western Region, providing a valuable platform for discussions on safeguarding personal information and promoting ethical communication in today’s digital space.

Honored to host the final phase of the Africa Data Protection Cross-Regional Peer Exchange Program in Kenya, bringing together data protection regulators from across the continent to exchange insights, share regulatory experiences, and strengthen collaboration on privacy and data protection.

The event was graced by Senior Deputy Data Commissioner John Walubengo, whose insights reinforced the importance of regional cooperation in advancing effective data protection frameworks across Africa.

The engagement highlighted the importance of African regulators working together to address emerging data governance challenges, strengthen enforcement frameworks, and build trusted digital ecosystems that support innovation and protect citizens’ rights.

Grateful to all participating regulators and partners for the insightful discussions and shared commitment to advancing data protection across the continent.

The Data Commissioner Immaculate Kassait,MBS joined stakeholders at the 3rd Annual Regulatory Authorities and Agencies Conference at South Eastern Kenya University, SEKU, Kwa Vonza, Kitui County.

Over the past three days, regulators and agencies have been deliberating on how to enhance service delivery and optimise government processes for the general public.

The Conference examined how regulators can deliver faster, fairer, and more responsive services while maintaining integrity, consistency, and public confidence in regulatory processes.

ODPC continues to support frameworks that protect personal data while enabling innovation and service improvement.